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0 Data storage system. 



0 A data storage system for storing a data block 
supplied to the system encoded in a set of at least 
three individual data sub-block signals, each of the 
signals encoding one of the same number of sut5- 
blocks Into which the data block is broken, has a 
plurality of similar data storage units (19a.19b,19c) in 
number equal to the number of data sub-block sig- 
nals and another, redundant, data storage unit (19d). 
each capable of storing a plurality of sub-blocks 
within itself responsive to a write select signal and 
encoding them in an output data sub-block signal 
responsive to a read select signal specifying the 
sub-block desired. Each of the data sub-block sig- 
nals is received by a preselected one of the data 
storage units. Each data storage unit is substantially 
physically independent from the others and liable to 
^independent failure to supply output data sub-block 
^signals' correctly encoding the sub-blocks stored 
therein. A data redundancy circuit (15) receives the 
^set of data sub-block signals for generating accord- 
^jQing to a preselected algorithm a redundant data sub- 
^ block, the redundant data subHblock being of the 
l^type for which a data reconstruction algorithm exists 
^permitting reconstruction of any one data sub-block 
Q using the remaining data sub-blocks and the redun- 
dant data sub-block, and for providing a signal en- 
ttj coding the redundant data sub-block to the redun- 
^dant data storage unit (19d). A plurality of data 
storage unit error detection circuits (13a.13b.13c) are 



each operatively associated with a preselected data 
storage unit for providing a sut>-block error signal 
responsive to failure of the associated data storage 
unit to correctly encode in an output data sub-block 
signal a sub-block stored within it. A control path 
(25) supplies the write and read select signals to the 
data and redundant data storage units 
(19a,19b.19cJ9d) in a preselected sequence. A data 
reconstaiction circuit (30) receives the sub-bk>ck er- 
ror signals from the error detection circuit 
(13a.13b,13c) and the data and redundant data sub- 
block signals from the data storage units, for em- 
ploying the data reconstruction algorithm to recreate 
and encode in the output data signal, the data sub- 
block originally stored within the data storage unit for 
which the sub-block error signal was generated. 
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DATA SI 

Thfs invention relates to data storage systems. . 
^ The device of choice today for non-volatile 

mass storage of data is a magnetic disk storage 
system. The type of magnetic disk storage system 
^ of particular interest here is the so-called hard disk 

drive having, not surprisingly, one or more rigid 
disks rotating at relatively high speed. Suspended 
aerodynamically a few microinches from each sur- 
face of the disk is a transducer device or head for 
' reading and writing data on the disk. In larger data 

processing Installations, there may be several 
drives all providing data storage for a single central 
computer. For some time, the reading or writing of 
several disk surfaces simultaneously has been con- 
templated in an effort to improve data rates be- 
tween individual disk storage systems and the con- 
trol computer. With the recent advent of large 
semiconductor memories, the difficult problem of 
synchronisation of data transmission between the 
disk storage systems and the central computer has 
been solved by the expedient of using such semi- 
conductor memories as a buffer to compensate for 
differences in angular position of the disks. 

While disk storage system reliability has im- 
proved substantially over the liast few years, they 
are nonetheless electromechanical and as such 
liable to occasional failures. These failures may be 
caused by defect in circuitry which affects the 
feedback function, in which case no data has been 
lost. It is only necessary to repair the defective 
circuitry to gain access to the data. If the failure 
comes at an inconvenient time, however, the de- 
lays may cause great expense to the users. If the 
failure occurs in writing circuitry or on the disk 
itself, then data is permanently lost. If the failure is 
a so-called head crash where the transducer device 
or head strikes and destroys the disk surface, then 
that data is permanently lost also. These cases 
usually are characterised by the fact that only a 
single drive or drive controller is involved. 
, In many cases, the data stored on the disks is 

nnuch more valuable than the disk storage systems 
themselves. This may arise in the situation where 
, the data, represents a major investment in com- 

puter or human time. Sometimes the data has 
^ time-related value, say in a real-time environment 

or when printing time-sensitive materials such as 
paycheques or management reports. Therefore. 
' one must usually design such data storage sys- 

tems for high reliability since the cost of losing 
data due to failure is often unacceptably high. 
Accordingly, there is substantial motivation for 
avoiding such loss or delay of access to the data. 

A well-known prior art solution to some of 
these problems involves the use of redundant data 
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to detect and to con-ect data. A so-cailed row and 
column error correction method uses row and col- 
umn parity. That is. bits of a data block are ar- 
ranged in rows and columns (at least conceptually) 
5 and a parity bit for each row anc3 column is re- 
corded with the data block. A parity bit is chosen 
according to a preset mle to indicate for the bit 
group involved, such as a row or column, whether 
the number of binary Is in the bit group is odd or 
70 even. Usually odd parity is used, where the parity 
bit is set to 1 if the number of ''I" data bits in the 
group involved is even, so that the total number of 
bits for a group is odd. thus assuring that at least 
one bit is present in every case. 
15 If parity in a single row and a single column is 
incorrect when a block is read back from the disk 
one can assume with some degree of assurance 
that the bit common to both the row and the 
column with inconrect parity is itself incorrect The 
20 error can t^e connected by inverting this common 
bit. It is usual to break the data into bit n^w groups 
of relatively short bytes of say 6 or 8 bits, with a 
row parity bit recorded for each byte. On the other 
hand, the column group of bits may be quite tong. 
25 An alternative method for enror detection and 

con-ection is represented by the family of so-called 
error connecting codes (ECC) which also involve the 
creation of a number of redundant bits for each 
data block. Common generic names for some of 
30 these are fire codes and Reed-Solomon codes. 
These can detect many errors in a block of data, 
and allow., in addition, several faulty bits in a block 
to be corrected. A well-known limitation of such 
ECCs is that they cannot correct more than a few 
35 bit errors in a block, nor can they correct more 
than one or two widely spaced bit errors. Thus, 
they are particulariy suited for correcting so-called 
burst en-ors where the errors are concentrated with- 
in a few bits from each other as may occur on 
40 magnetic media. Accordingly, it is the practk» to 
use ECC redundancy within such types of data 
storage systems as disk and tape drives. 

Readback electronics are also likely to produce 
occasional errors, but these are usually either ran- 
45 dom single bit errors widely spaced from each 
other, or errors spaced from each other at regular 
and relatively short intervals. These random enters 
are usually "soft", i.e. they do not repeat and 
hence can be connected by re-reading the data 
so from the data storage medium. Post-readt)ack byte 
parity redundancy (hereafter byte parity) may be 
used to detect these errors. By byte parity is 
meant the insertion at regular intervals (i.e. with 
each byte), in the data just after readback. a parity 
bit which provides parity en-or detection for the 
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associated byte. Regularly spaced errors are usu- 
ally indicative of a faHure after the serial to parallel 
conversion during readback. Such errors are not so • 
easily conrected but can at least be detected by 
byte parity redundancy added to the data after it is 
read from the data storage medium. It is the usual 
practice to use ECC redundancy on the data stor- 
age medium itself and both byte parity and ECC 
redundancy during readback so as to provide maxi- 
mum confidence in the integrity of the data ma- 
nipulations during readback without a great amount 
of redundant data stored on the data storage me- 
dium. Further, it is preferred to overiap the two sets 
of redundant information so that no part of the data 
pathway is unprotected by error 
detection/conrection. 

It is also known to use row and column error 
correction as described above in magnetic tape 
data storage systems. If the same bit in a number 
of rows fail, this method allows reconstaiction of 
the columns so affected. This usually is the result 
of a failure in the head or electronics for the 
column since a tape data storage medium defect is 
almost never restricted to a single bit position from 
row to row. 

It Is now possible to design a typical state-of 
the-art data storages system having multiple data 
storage units so that failure of a single storage unit 
occurs independently of. and without affecting the 
availability of similar units. For example, each may 
have its own power suppfy and controller, now 
technically possible at modest additional cost 

According to *e present invention there is 
provided a data storage system for storing a data 
block supplied to the system encoded in a set of at 
least three individual data sub-block signals, each 
of said signals encoding one of the same number 
of sub-blocks into which the data block is broken, 
the system being characterised by comprising: a 
plurality of similar data storage units in number 
equal to the number of data sub-block signals and 
another, reclundant. data storage unit each capable 
of storing a plurality of sub-blocks witiiin itself 
responsive to a write select signal and encoding 
them in an output data sub-block signal responsive 
to a read select signal specifying the sub-block 
desired, each of the data sub-block signals being 
received by a preselected one of the data storage 
units, and each data storage unit being substan- 
tially physically independent from tiie others and 
liable to independent failure to supply output data 
sub-block signals con-ectly encoding the sub- 
blocks stored tiierein; data redundancy means re- 
ceiving the set of data sub-block signals for gen- 
erating according to a preselected algorithm a re- 
dundant data sub-block, said redundant data sub- 
block being of the type for which a data recon- 
struction algorithm exists permitting reconstruction 



of any one data sub-block using the remaining data 
sub-blocks and the redundant data sub-block, and 
for providing a signal encoding the redundant data 
csub-block to the redundant data storage unit; a 
5 plurality of data storage unit error detection means 
each operativety associated witii a preselected data 
storage unit, for providing a sub-btock enror signal 
responsive to failure of the assodated data storage 
unit to conrectiy encode in an output data sub-block 
70 signal a sub^block stored within it; control means 
for supplying the write and read select signals to 
tine data and redundant data storage units in a 
preselected sequence; and data reconstructiori 
means for receiving ttie sub-block error signaiis 
75 from the error detection means and the data and 
redundant data sub-block signals from the data 
storage units, for employing the data reconstruction 
aigoritiim to recreate and encode in the output data 
signal, the data sub-block originally stored within 
20 the data storage unit for which the sub-block error 
signal was generated. 

In tiiis. invention, for example, a data block is- 
split into a number of data sub-blocks, each of 
which is encoded for storage in a different data 
25 storage unit (DSU) along with its own enror detec- 
tion and correction information. A sub-block con- 
sists of a fixed number of bits organised in a 
sequence allowing each bit to be identified by its 
position in the sequence. For the purpose of im- 
30 piementation. each sub-block bit is associated with 
the similariy positioned bits in the otiier sub-blocks 
to form a bit row. It is desirable (for tiie purposes of 
maximising speed of operation) tiiat Uie storage 
units be approximately synchronised so that the 
35 sub-blocks are read back witiiin approximately the 
same interval and at approximately the same bit 
rate. 

The data storage system generates a redun- 
dant data sub-block for the data sub-blocks accord- 

40 ing to a preselected aigoritiim for which a data 
reconstruction algorithm exists pemnitting recon- 
struction of any one .data sub-block using the re- 
maining data sub-blocks and the redundant data 
sub-block. Preferably, tiie redundant data sub-block 

45 comprises a set of parity bits, one parity bit being 
associated logically and positionally with each bit 
row. Anotiier, redundant, data storage unit stores 
this redundant data block. During writing, it is con- 
venient to- generate tiie redundant data subblock bit 

50 by bit as the bit rows are supplied to the data 
storage units so as to allow the redundant data 
block to be stored concurrently with tiie data 
blocks. During readback of a particular block, each 
redundant data block bit can be made available at 

55 about tiie same time its row is. 

The odds are extremely remote that two modr 
em data storage units will fail simultaneously. Thus, 
when a single storage unit fails, ttie error detection 
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mechanism associated with it generates an error 
signal. As previously stated, it is extremely unlikely 
that an error can occur in any column (or sub- 
block) without being detected by the associated 
column error detectors. Detection of an error in a 
sub-block is used to activate data reconstaiction 
means operating on the individual rows. Each row 
having a parity error is corrected by inverting the 
bit in the column for which the error signal was 
generated. The data storage system of the present 
invention in its preferred embodiment can con-ect 
several types of multiple en^rs. 

By far the most likely multiple error failure 
mode Is for a single data sub-block to contain all 
the enrors. The physical basis for this is that a 
defect in the data recording medium or circuitry of 
a single data storage unit may well affect more 
than one bit in a sub-block, or for that matter, many 
sub-blocks being stored in the same storage unit. 
As mentioned earlier, since failure of even one of 
the data storage units is a rare event, the failure of 
two within a short period of time is extraordinarily 
rare. 

Preferably the data storage system includes 
byte error code generating means for receiving a 
data sub-biock signal from a data storage unit, for 
providing to the error detection means a signal 
encoding a byte error detection code associated 
with at least one byte within the sub-block, said 
byte error detection code generated according to a 
preselected byte error detection algorithm which 
includes as a part thereof steps by which certain 
data errors in each-said byte may be detected: and 
byte error detection means for receiving each byte 
error detection code signal and a signal encoding 
the byte for which it was generated, for applying 
the error detection algorithm to each said byte and 
its associated byte detection code and responsive 
to detection of an error in said byte, issuing a byte 
en^or signal associated with the byte having the 
en-or and its sub-block, the data redundancy 
means including means for generating according to 
the preselected algorithm a redundant data suth 
block whose data reconstruction algoritiim permits 
reconstruction of a byte within a data sub-block 
using an associated byte in tiie redundant sub- 
block and an associated byte from each of the 
other data sub-blocks, the data reconstioiction 
means including means for receiving the byte error 
signal, for employing the data reconstruction al- 
gorithm to recreate and encode in the output data 
signal the data sub-block byte originally stored 
within the data storage unit. Note that this approach 
allows correction of more than one error occurring 
in different sut)-bIocks of the same block so long 
as more than one of a group of associated sub- 
block bytes does not have errors. 

This data storage system Is particularly suit- 



able for implementation as a disk drive data stor- 
age system. As mentioned eariier, it is advanta- 
geous to increase data transfer rates by simulta- 
neously reading and writing several data storage 
5 units simultaneously. It is relatively easy to design 
a system so that most disk drive failures are in- 
dependent, i.e. are unlikely to cause any of the 
other drives to fail. , 

The present invention seeks to provide a data 
70 storage system: to reduce the probability of losing 
data to a small fraction of the probability of an 
individual storage unit failing; to allow data storage 
units to be simultaneously written and read to in- 
crease data rates: to avoid any interruption in op- 
ts oration of a data processing system caused by 
failure of a single data storage unit; to avoid the 
necessity for and expense of emergency main- 
tenance; to allow maintenance necessitated by fail- 
ure of an individual data storage unit to be deferred 
20 to a scheduled maintenance time, typically much 
less expensive; and to allow a failed data storage 
unit to be taken off-line and repaired while the rest 
of ttie data storage system functions with the error 
correction active and so permit uninterrupted data 
25 storage system operation during such repair. 

The invention is illustrated, merely by way of 
example, in the accompanying drawings, in which:- 
Rgure 1 is a block diagram of a simplified 
data storage system according to the present in- 
30 vention; and 

Rgure 2 is a detailed block diagram of data 
reconstruction circuitry of a data storage system 
according to the present invention. 

A data storage system according to the present 
35 invention and described below has fewer than the 
number of data storage units one would normally 
select. However, the number selected (4) accu- 
rately illusti-ates a data storage system operating 
according to the present Invention and avoiding the 
40 confusion which adding the likely more preferable 
a or 9 data storage units might create. Note that . 
many different configurations of data storage sys- 
tem according to the present invention are possi- 
ble. The various details of this embodiment are 
45 merely illustrative, and not intended to exclude 
otiiers. For example, many variations in logic cir- 
cuitry are possible to implement functions de- 
scribed. As the explanation proceeds, possible vari- 
ations will be mentioned on occasion, however, so 
so as to allow the reader to understand the many 
specific configurations which the invention may 
have. 

The present invention ts described with refer- 
ence first to Frgure 1 which is a block diagram of a 
55 data storage system according to the present in- 
vention comprised of Individual data storage sub- 
system blocks. Many of the individual blocks repre- 
sent one or more micro-circuit elements commonly 
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available today. Other elements, such as data stor- 
age units (DSUs) 19a.19b,l9c. 19d are well-known 
devices which may be, for example, disk drive 
units as mentioned previously. Individual blocks are 
connected by data paths over which individual bits 
represented by electrical pulses flow. Unless in- 
dicated otherwise by a small circle with a number 
in it (e.g. ref. no. 27) specifying the number of 
parallel lines represented, it should be assumed 
that a data flow on an individual path is serial, i.e. 
individual bits are provided sequentially to the des- 
tination block or that the path canies a control 
signal of some type. 

It should also be understood that no attempt is 
made in the drawings to show the explicit timing 
relationships needed to allow the data storage sys- 
tem to function properly. Such timing consider- 
ations are well understood and hence need not be 
discussed in detail. Moreover, the following de- 
scription either expiicitiy or implicitly establishes all 
of the timing relationships necessary to understand 
and implement tiie present invention, 

it will be noted that Rgure 2 contains much 
more detail than Figure 1. This is because Figure 1 
is concerned mostly with the writing of data in a 
format pemrtitting its correction by tiie data re- 
construction circuitry of Figure 2. The correction or 
reconstruction of the data is an inherentiy more 
complex problem than mere recording of the origi- 
nal data with the redundancy needed to permit the 
con-ection. Thus it is necessary to describe reading 
apparatus in greater detail than writing apparatus. 

Turning first to Figure 1, data blocks, each 
comprising a fixed number of bits, can be consid- 
ered to become available one at a time from an 
external data source on a data path 11 when tiie 
data storage system of Rgure 1 is idle or otherwise 
able to accept a data block. It is convenient to 
assume that each data block has ttie same number 
of bits in it. typically in the thousands or tens of 
thousands of bits. The data on the path 11 is 
received by a block divider 10 which divides tiie 
data block into three sub-blocks of equal lengtii 
which are transmitted on data patiis 12a.12b.12c to 
ECC generators 13a.13b.13c respectively. The 
block divider 10 can be designed to operate in one 
of two modes. eiti:»er of which is acceptable. In the 
first mode, a serial order is established for all tiie 
bits in the data block on the patii 11 and then tiie 
first, fourtii. seventii. etc. are placed on tiie patii 
12a; the second, fifth, eighth, etc. on the path 12b; 
and the third, sixtii, ninth, etc. on tiie path 12c. 
Alternatively, the block divider 10 can divide each 
data block into sequential groups of bits, or bytes, 
placing each first group sequentially on tiie patii 
12a, each second group on the path 12b. and each 
third group on the path 12c. 

Further, it is convenient to specify a sequence 



for the bits comprising each data sub-block, and to 
associate tiie bits occupying the same position in 
tiie sequence in each data sub-block. Each such 
group of bits, each bit in a group being from a 
different data sub-block, will be referred to here- 
after as a row from the analogy to a bit matrix 
where each data sub-block comprises a column. In 
this embodiment, the bits comprising each row are 
issued simultaneously by the block divider 10. It is , 
I immaterial whether bits are provided serially or in 
parallel on the patiis 12a,12b. 12c, altiiough tiie 
elements receiving signals on thesa patiis must be 
compatible witii, tiie format chosen. 

The ECC generators 13a.13b.13c are substan- 
; tially identical devices which generate error correc- 
tion and detection data for each data sub-block 
which is received on their respective input data 
patiis 12a.12b,12c. The ECC code for each data 
sub-block is generated as the data sub-block is 
0 received, and the data is passed tiirough the ECC 
generator involved and encoded in a signal placed 
on an associated patir Ua.1*.14c. At tiie end of- 
the data sub-block, the ECC code value has been 
determined and is encoded and appended to the 
5 signal for each patii 14a.Ub,14c As mentioned 
eariier. tiie algoritiim used by tiie ECC generators 
13a,13b.13c provides a very high likelihood of de- 
tecting any enrors in the data sub-block. 

A row parity generator 15 also receives the 
10 data sub-blocks row by row on the paths 
12a,12b.12c from the block divider 10. Recall of 
tiie data bits forming each row are simultaneously 
presented in the signals on tiie patiis 12a,12b,l2c. 
The parity generator 15 determines the parity of 
35 each row of bits simultaneously presented to it on 
tiie patiis 14a,14b,14c and a few tens of 
nanoseconds later provides a signal encoding tiiis 
parity on a path 12d, tiiereby preserving approxi- 
mate synchronisation between tiie data on the 
40 patiis 12a.12b, 12c and ttie associated row pajrity 
bits on ttie patii 1 2d. As a practical matter a few 
tens of nanoseconds are negligible compared to 
the duration of one bit interval on tiie paths 
12a,12b,12c. The ECC generators 13a,13b 
45 I3c.13d can all be considered to be similar devices 
having identical speeds. Thus, tiie data storage 
units (DSUs) 19a,19b.19c.19d in effect simulta 
neously receive each row and the row parity whici - 
has been calculated for it by ttie parity generate 
50 15. If the parity generator 15 is so slow tiiat i 
destroys tiie synchronism between the bit rows anc 
their individual row parity bits, then it is a simpU 
matter to deal witii tiiis problem by. for example 
inserting signal delays in tiie patiis 14a,14b.14c. 
55 While each row witii its parity need not. in thf 
general case, be presented simultaneously to tin 
DSUs 1 9a.1 9b.1 9c. 1 9d. it is usually prefeRed to d( 
so. so that each DSU 19a.l9b,19c,19d is active a 
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the same time, increasing the bit storage rate. In 
data storage systems -which use disks as the data 
storage medium in the data storage units, synch- 
ronising disk rotation results in very Increases In 
both storage and retrieval speed if the bits of each 
* row are simultaneously presented to their data stor- 

age units. 

At the time that the data block to be stored in 
1 the DSus 19a,19b,19c is placed on the path 11. a 

signal is also placed on a read/write control path 25 
which specifies that writing or storage of data is 
desired, and also specifies the physical location on 
the disks at which the data block is to be stored. 
The source of this signal may be a CPU (central 
processing unit. i.e. computer) which uses the data 
storage system of Figure 1 as a peripheral device, 
or it may be a system controller or may have parts 
supplied by both. 

The purpose of the present invention is to deal 
with a failure of one of the DSUs 19a,19b,l9c by 
using the redundancy supplied to the system by 
the DSU 19d to recreate the data. To justify the 
cost of an additional DSU, the units must be rela- 
tively cheap In comparison to the data to be stored. 
Further, failure of one DSU must in most cases be 
independent of failure of the others. That is. the 
cause of a failure must usually be of the type 
which causes only a single one of the DSUs to fail, 
so as to allow the data storage system of the 
present invention to recover or recreate the data. 
Examples of such kinds of failures are power sup- 
ply and fuse failures, logic and signal, processing 
failures, head and data storage medium failures in 
magnetic tape and disk storage systems, bad ca- 
bling connections, etc. 

Examples of non-independent failures which a 
data storage system of the present invention can- 
not correct are power failures which cause all 
DSUs to fail simultaneously, or failure of controller 
hardware, common to all the units. But if the failure 
is one where an individual one of the DSUs fails 
and other DSUs continue to perform normally, then 
the present invention can make a useful contribu- 
tion to overall reliability of the data storage system. 

Therefore, it is preferred that each DSU has its 
own controller so that controller failure is localised 
in a singly DSU. Such DSUs fail relatively rarely, 
and failures are for the most part independent of 
each other. 

If the DSUs 19a.19b.19c.19d are magnetic or 
optical disk drives, as is preferred, synchronising 
the disk rotation to each DSU allows bit space 
sequences on one disk to be permanently asso- 
ciated with similar sequences on the disks of other 
DSUs so that associated sequences pass beneath 
their read/write heads or transducer devices during 
nearly the same time interval. Such synchronisation 
has the further advantage of allowing simplified 



readback and true parallel data operation. 

The DSUs 19a.l9b,19c.19d all receive and 
store each set of three row bits and \h&r asso- 
ciated parity bit very nearly simultaneously. As 
. 5 successive sets of rows and the associated parity 
bits are presented to the DSUs 19a,19b,19c,19d, 
these too are stored so that at the end of the data 
sub-blocks, the bits are arranged* on the disks 
within the DSus 19a,19b.19c,19d in serial fashion. 
10 The individual data sub-blocks are followed by the 
aforementioned ECC information which is also 
stored serially on the disks of the DSUs. Thus, 
when writing of a block has been completed, each 
data sub-block has been serially stored with its 
75 ECC information appended: Further, because of the 
synchronisation of spindles canning the disks of 
the individual DSUs. when the read/write heads are 
positioned in the tracks storing the data sub-blocks 
involved, the bits of each individual row will appear 
20 beneath the respective readwite heads at very 
close to the same instant. 

It is usually the case that a particular data 
block is to be stored at a predetermine physical 
location on the disks of the DSUs 19a,19b,19c,19d. 
25 Thus, the data block must be presented to the 
block divider 10 at a time synchronised with the 
angular position of the spindles which carry the 
disk within the DSUs 19a.19b,19c,19d. Typically, 
the data source is itself signalled to begin transmit- 
30 ting the data block to be stored when the read'write 
heads have been property positioned in the desired 
data tracks and the disks angular positions are 
such that the writing signals appear on the 
read/write heads as the desired physical lengths of 
35 the tracks are passing beneath the heads. Such 
synchronisation and coordination between the 
transmission of data from the source and the dlsk- 
(s) on which it is to be stored is well-known. 

During reading, control signal encoding the lo- 
40 cation of the desired data block issued to the 
individual DSUs 19a.19b.19c.19d on the patii 25 
cause the read/write heads to be positioned on the 
tracks containing the data sub-blocks of the desired 
data block. Further, the read/write signal on tiie 
45 patti 25 specifies the desired function as reading. 
As tiie individual bit spaces move past tine 
read/write heads. each of Uie DSUs 
19a,19b,19c.19d encode in a raw data signal car- 
ried on paths 16a,16b.16c,16d respectively, tfie bits 
50 of the data sub-block stored in the ti-ack - spaces 
specified by the read/write signal. Bits in the raw 
data signals are accompanied by clock (CLK) sig- 
nals on paths I5a,15b,15c.15d as provided by the 
DSUs 19a, 19b,19c,19d involved. A set of serial to 
55 parallel circuits 26a,26b.26c.26d receives the raw 
data and clock signals from their respective DSUs 
19a,19b,19c.19d and assembles each successive 
set of 8 bits into 8 bit parallel byte signals on paths 
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17a,17b,17c,17d followed a very short fixed interval 
later by a byte clock signal on the associated path ; 
22a,22b.22c,22d. 

Byte parity generators 18a,iab,18c.18d receive ? 
the B bit bytes on the paths 17a.17b.17c.17d re- \ 
spectively and generate an odd byte parity bit for ; 
the byte received, encoding this parity bit in sig- 
nals on paths 24a,24b.24c.24d respectively The .; 
byte parity generators 18a.18b,18c,18d are of the-; 
type with such great internal speed relative to the 
time that a particular 8 bit byte signal is available 
on the paths 17a.17b,17c.17d that each 8 bit byte i 
signal and its associated byte parity bit can be . 
treated as a single 9 bit byte. This is symbolised . 
by the combining of the parity signals on the paths 
24a,24b.24c.24d with their related byte signals on : 
paths 17a,17b.l7c.l7d to form 9 bit byte signals as , 
encoded on paths 21a.21b,21c.21d. Thus, the clock ; 
signal on the respective clock signal path ] 
22a,22b,22c.22d identifies the times at which in- , 
dividual data and row parity bits are present on the 
paths 21a.21b,21c,21d respectively. If en-ors occur 
in the data during later processing, testing this row 
parity is very likely to reveal such errors, and th^ 
capability of the error correction system to be\ 
described in relation to Figure 2 allows errors in : 
different data sub-blocks to be con*ected in many 
cases. 

A data recovery system 30 receives these data ^ 
and row parity signals and provides an output 
signal on the path 62 encoding the data block 
originally supplied on the path 11, correcting those 
errors which are correctable. Intemal faults sensed 
by tiie DSUs 19a.19b.l9c.19d are indicated to the 
data recovery system 30 on their respective fault 
signal paths 23a.23b.23c.23d In many cases, this ; 
data storage system can also recover from com- ; 
plete loss of data on one of the DSUs 
19a,19b.19c.19d as indicated by a fault signal on 
one of the paths 23a.23b.23c,23d, 

Figure 2 discloses the details of the data re- 
covery system 30 which allows the reconstruction 
of an entire data block stored on the DSUs! 
19a.19b,19c in spite of the presence of one or; 
more otherwise uncon^ectable en-ors in. or even the 
unavailability of, a constituent data sub-block 
stored on any one of the DSUs 19a.19b.19c. The ^ 
earlier mentioned read command on the path 25 
also signals a control logic element 50 to begin a i 
read sequence, the steps of which will be de- , 
scribed in conjunction with the description of Fig- , 
ure 2. 

The major elements at tiie input side of read- ' 
back circuitry are sub-block buffers 
52a.52b,52c.52d. which store each entire data sub- 
block as they are received on the paths 
21a.21b.21c.21d from the DSUs 19a.19b.19c,19d 
respectively. The buffers 52a.52b.52c.52d are simi- 



lar devices from which the data sub-blocks are 
read and corrected if necessary. The byte parity. 
DSU fault signals, and the appended ECC informa- 
tion may all be used to determine need for conrec- 
5 tions. Their use will be explained using the buffer 
52a as an example. The buffer 52a has an internal 
pointer register for addressing its bij locations. This 
intemal pointer register is initially cleared by a 
RESET ADR (ADdRess) signal on a path 66 gen- 
70 erated in response to a read command on the path 
25. The Intemal pointer register is incremented by 
one by each clock (CLK) signal pulse on a path 
68a. When a readwrite select (RA/V SEL) signal on 
a path 65 is set to a logical 1, it places the buffer 
75 52a in a write mode and individual 9 bit bytes can 
be loaded into the buffer 52a via tfie data path 21 
and stored or written in the location in the buffer 
52a specified by its internal pointer register. Suc- 
cessive clock pulses on the path 68a cause this 
20 intemal pointer register to cycle through the inter- 
nal memory of the buffer 52a and load successive 
bytes presented on the path 21a into the buffer- 
locations specified by the internal pointer register. 
When the path 65 canies a logical 0. the buffer 
25 52a is set to a read mode and places on the data 
path 63a a signal encoding the contents of the byte 
location addressed by the intemal pointer register. 
As the intemal pointer register content is incre- 
mented by pulses on the path 68a. the path 63a 
30 successively canies signals encoding each byte 
stored in the buffer 52a. Furtiier. when the buffer 
52a first enters the read mode from the write 
mode, the correction part of tiie ECC algorithm by 
which ttie ECC information appended to the data 
35 on the path 21a is developed, is implemented 
within the- buffer 52a to con^ct tiie data in the 
buffer 52a if necessary and possible. Similar activ- 
ity is associated with each of the sub-block buffers 
52b.52c.52d. 

40 An ECC test element 57a is very closely re- 
lated to the buffer 52a. and receives the data and 
byte parity signals on the patins 21a to perform the 
complementary function of detecting errors in the 
data. Errors detectable but unconrectable by the 

45 ECC algorithm are independentiy signalled by the 
ECC test element 57a with a logical 1 on a path 
67a. A logical 0 indicates ettiier a data sub-block 
which has no errors in it or one in which erors 
have been conrected witiiin the buffer 52a. ECC 

50 test elements 57b.57c.57d are similarly related to 
buffers 52b,52c.52d respectively and perform the 
same functions, providing a logical 1 signal on 
paths 67b,67c.67d when detectable but uncorrec- 
table en-ors are present in the data sub-block just 

55 received, and a logical 0 otherwise. It is necessary 
to reset each test element 57a.57b.57c.57d before 
receipt of each data sub-block. 

A read operation requested by a signal on the 
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path 25 prompts the control logic device 50 to 
execute a signal sequence for first loading the 
individual data sub-blocks from the DSUs 
19a,19b,19c.19d into the buffers 52a,52b.52c.52d 
respectively and then eventually placing ^e data 
sub-block bytes sequentially on paths 62a,62b.62c. 
corrected as necessary and possible. Initially, the 
control logic device 50 places a reset signal on the 
path 56 which sets the internal pointer registers in 
the buffers 52a.52b,52c,52d to the address of the 
first byte's location in each, tt can be assumed 
shortly thereafter the DSUs 19a,19b,19c.19d start 
transmitting bits serially on the paths 
16a,16b,16c,16d which are assembled into bytes 
and encoded in the signals on the paths 
21a,21b.21c,21d. each byte being followed shortly 
by a loading clock (LD CLK) signal on the paths 
22a,22b.22c.22d, all respectively. 

Each LD CLK signal on the paths 
22a22b^2c,22d is applied to one Input of an OR 
gate 55a.55b,55c.55d respectively which in re- 
sponse produces the clock pulses on paths 
68a.68b,68c.68d needed to increment the internal 
pointer registers in the buffers 52a.52b.52c, 52d. 
Since the timing of the LD CLK signals is ultimately 
controlled by the DSUs 19a,19b.19c.19d individ- 
ually, each of the buffers 52a.52b.52c.52d can be 
filled at the speed of its associated DSU 
19a,19b.19c. 19d. 

As each data or row parity sub-block byte on 
the paths 21a.21b.21c.21d is received by the buff- 
ers 52a.52b.52c.52d. the byte is also transmitted to 
the respective ECG test element 57a.57b.57c.57d. 
Before the start of transmission from the DSUs 
19a.19b.19c.19d. the test elements 
57a,57b,57c,57d receive on a path 54 the clear 
error data signal from the control logic device 50 
which signal Is used to initialise each test element. 
Each test element 57a.57b.57c,57d has an internal 
accummulator which contains during transmission 
of data bytes to it, the current results of the error 
detection algorithm employed by the test elements 
57a.57b.57c,57d, and this is initially set to 0 in 
each by the clear error data signal on the path 54. 
The test elements 57a,57b.57c.57d also typically 
contain an intemal counter, each of which is set to 
the number of bytes in a data sub-block by the 
signal on the path 54. 

Each signal pulse on the paths 
22a.22b»22c.22d causes its associated test ele- 
ment's counter to decrement by 1. When the coun- 
ter has been decremented the number of times 
equalling the number of bytes in a data sub-block, 
the test element 57a.57b.57c,57d then uses the 
remaining bytes received as the enror detection 
code and compares it to the contents of the asso- 
ciated internal accummulator to determine whether 
detectable but not correctable errors are present in 



the data transmitted on the associated paths 
21a.21b.21c.21d. If no such enrors are present in 
this data (or in the row parity information on the 
path 21 d) a logical 0 is placed on the associated 
5 output paths 67a.67b.67c.67d. If an error is de- 
tected in this procedure, a logical 1 is placed on 
the path 67a,67b,67c.67d associated wifli the erro- 
neous data or row parity. « 

As previously mentioned, ttiere are several er- 

70 rors which can be sensed internally by the DSUs 
19a.19b.19c. 19d, and whose occurrence is sig- 
nalled on the associated fault signaf path 
23a.23b.23c.23d. The ECC test en-ors signalled on 
the path 67a,67b.67c,67d are provided with the 

75 DSU fault signals on the paths 23a.23b,23c^3d to 
the inputs of OR gates 82a.82b,82c.82d respec- 
tively. The OR gates 82a,82b.a2c.82d thus provide 
an output signal which is a logical 1 when an en^or 
has been detected by either the assodated DSUs 

20 19a,19b.19c.19d or the associated test element 
57a.57b.57c.57d. . The output of the OR gates 
82a,82b.82c,82d. form the inputs to the set (S)- 
inputs of flip-flops 59a.59b.59c.59d respectively on 
paths 85a.85b.85c.85d. 

25 At the start of each read operation, the flip- 
flops 59a.59b.59c.59d receive on their reset (R) 
inputs the clear error data signal provided on the 
path 54. This signal sets the initial state of the flip- 
flops 59a.59b.59c.59d to their cleared condition, 

30 where the logic levels of their outputs are 0. In 
response to a logical 1 on any of the paths 
85a.85b.85c.85d. the associated flip-ftop 
59a,59b.59c,59d output on paths 70a.70b,70c.70d 
is set to a logical 1 Thus after each group of data 

35 sub-blocks comprising a data block having been 
loaded into the buffers 52a.52b.52c.52d. the out- 
puts of the flip-flops 5ga.59b.59c.59d indicate by a 
0 or a 1 at their outputs whether the data sut>-bIock 
in the associated buffer 52a.52b.52c.52d is respec- 

40 tively con-ect or in enror. It should be noted that the 
logic circuitry handling the row parity sub-block 
stored in the row parity buffer 52d has sorrie simi- 
larity to the logic circuitry handling the data sub- 
blocks. 

45 When the data sub-blocks and the row parity 
sub-block have been loaded into the buffers 
52a.52b,52c.52d respectively, and the en^or flip- 
flops 59a.59b.59c,59d have been set to indicate 
whether a data suthbkrck contains an enror or not 

50 as just explained, then the remainder of the read 
process. Including en^or correction if necessary, 
can proceed. The control logic device 50 resets the 
intemal pointer registers in the buffers 
52a.52b.52c.52d to the start of the data sub-blocks 

55 again within these buffers. The control logic device 
50 also sets the output on the R/W SEL path 65 to 
a logical 0, conditioning the buffers 
52a.52b.52c.52d to output the data stored in them 
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on the paths 63a.63b,63c,63d. The control logic 
device 50 then, issues read clock (RD CLKV pulses 
at a preset rate on a path 64 in a number equal to 
the number of bytes stored in a data sub-block. 
These are received by a second input terminal of 
the OR gates 55a,55b;55c,55d. Each of these 
pulses causes the OR gates 55a,55b.55c,55d to 
transmit a pulse on the paths 68a,68b.68c,68d re- 
spectively, causing the buffers ■52a,52b,52c.52d to 
transmit one data sub-block byte stored within 
each of them on the paths 63a,63b,63c,63d. Each 
set of data bytes from the buffers 52a,52b.52c, and 
the row parity byte frorrr the buffer 52d which issue 
In response to the same read clock pulse on the 
path 64 contans associated information for pur- 
poses of correcting a portion of the data. It should 
be noted that the buffers 52a,52b,52c,52d may be 
of the type which can be written into and read from 
simultaneously, in which case the buffers 
52a,52b,52c.52d may be loaded by the next block 
to be read from the DSUs 19a.19b.19c,19d while 
the current block is undergoing any connection 
needed and transmission from the buffers. 

A transverse parity generator 56 simultaneous- 
ly receives the data and parity bytes which have 
been read from the buffers 52a,52b,52c,52d by the 
same read clock pulse on the path 64, and in 
response to this data generates, properly ordered, 
the 8 bits of the bit by bit odd parity of each set of 
four associated bits provided on the paths 
63a,63b.63c.63d. That is, the bits from each of the 
bytes on the paths 63a.63b.63c,63d which occupy 
the same position- in their respective bytes are 
used to generate the bit in the parity byte on the 
path 81 occupying the corresponding location. Odd 
parity is generated in each position so that if the 
bits involved are ail correct, then the corresponding 
output parity bit on path 81 is a logical 0. If the 
parity of the four input bits is even. Le. has one 
incorrect bit in it, then generating odd parity pro- 
vides a logical 1 on the path 81 in the conrespond- 
ing bit position. 

An 8 ^ 2 bit AND gate array 78 receives the 8 
bits canried in parallel on the path 81, property 
ordered, at its 8 data (D) inputs and the output of 
an Inverter (I) element 74 on a path 88 at each of 
its 8 gate (G) inputs. If the signal on the path 88 at 
the gate- input is a logical €, each bit of the 8 
outputs on a path 69 from the AND gate 78 is also 
a logical 0. If the signal on the path 88 is a logical 
1 , the 8 data bits provided on the path 81 to the 8 
data inputs of the AND gate array 78 are gated to 
the outputs of the path 69 making its signal iden- 
tical to the signal on the path 81. It will be ex- 
plained later how the gate input on the path 88 is 
set to a logical 1 if the parity information byte 
cun'ently being processed appears to be correct. 
Turning next to byte parity test elements 



76ar76b,76c.76d. each of these sequentially re- 
ceive the bytes placed on the paths 
63a,63b.63c.63d by the respective buffers 
52a.52b.52c.52d. The parity of each such byte is 
5 tested by the byte parity test element 76a. 
76b.76c,76d receiving it. and if conrect, a logical 0 
is provided on associated path 87a,87b.87c.87d to 
the OR gate 77a.77b.77c,77d receiving the signal 
on the path as an input. If parity is tested to be 
10 incon-ect, then a logical 1 is provided on the path 
87a.87b.87c.87d respectively to the OR gate 
77a.77b.77c.77d involved. As described above, 
each OR gate 77a,77b.77c.77d receives as its oth- 
er input the output of the associated flip-flop 
15 59a,59b,59c.59d. 

The outputs of the OR gates 77aJ7bJ7c are 
provided on paths 80a.80b,80c respectively to the 
8 gate (G) inputs of each of 8 ^ 2 bit AND gate 
an-ays 60a.60b.60c. The 8 ^ 2 bit AND gate arrays 
20 60a,60b.60c are identical in construction to that of 
the 8 ^ 2 bit AND gate array 78 and operate in the 
same way. The 8 ^ 2 bit AND gate arrays. 
60a,60b,60c receive at tiieir 8 data (D) inputs the 
property ordered 8 bit output of the 8 ^ 2 bit AND 
25 gate arrays 78 on the path 69. The 8 bit outputs of 
the AND gate anrays 60a.60b.60c on paths 71a, 
71b,71c respectively thus duplicate the 8 bits on 
tiie patti 69 if and only if the data sub-block asso- 
ciated with tiie 8 2 bit AND gate array 
30 60a,60b.60c involved has an error in it as indicated 
by the logical 1 earned on tiie respective input path 
80a.&0b,80c. 

An OR gate 77d receives the output of the flip- 
flop 59d on the path 70d and of the byte parity test 
35 element 76d on ttie patii 87d at its two inputs. If 
either or botii of these inputs is a logical 1 . i.e. an 
error has been sensed as Indicated by the flip-flop 
59d or detected by tiie byte parity test element 
76d. tiien the OR gate 77d produces a logical 1 
40 encoded in the signal at its output on a patii 80d. 
The output of the OR gate 77d is inverted by tiie 
inverter 74 and provided to the gate input of the 8 
^ 2 bit AND gate array 78 on the paUi 88. Thus, if 
the parity information byte on the path 81 has 
45 passed all of its en-or tests, a logical 1 is placed on 
th^ path 88 and ttie parity information byte is gated 
by tiie 8 ^ 2 bit AND gate array 78 on the path 69. 

8 ^ 2 bit exclusive OR (XOR) gate arrays 
61a.61b,61c each receive two properly ordered 8 
50 bit parallel inputs on tiieir two inputs and provide 
the bit by bit exclusive OR of tiiese two inputs as 
their outputs. As is well-known, an exclusive OR 
element generates a logical 0 value if tiie two input 
arguments or signals are equal to each other, and 
55 a logical 1 value if the two arguments are unequal. 
Thus for each bit which is a binary or logical 1 on 
any of the 8 bit parallel pattis 71a,71b,71c, the 8 ^ 
2 bit XOR gate arrays 61a,61b.61c provide the 
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inversion of the corresponding bit of the data sub- 
block bytes carried on the paths 63a,63b.63c as 
the output in the corrBsponding bit positions of 8 • 
bit parallel data paths 62a,62b.62c. All of the bit 
values on the paths 63a.63b.63c for which the' s 
conresponding bit values on the paths 71a,7lb,71c 
are a logical or binary 0. are provided unchanged 
in the conresponding bit position of the paths 
62a,62b,62c. To reiterate, it is, of course, essential 
that proper order of bit positions in the path 63a io 
with the path 71a. the path 63b with the path 71b, 
etc. be maintained. 

Thus, if a row parity en^or is present in a set of 
bits occupying the same relative position in the 
buffers 52a.52b.52c.52d and one of the DSUs (via rs 
fault signals on the paths 23a.23b,23c.23d). byte 
parity tests (via byte parity test elements 
76a.76b,76c) or ECC . tests (test elements 
57a.57b.57c) identifies the buffer in which the erro- 
neous bit Is located, the bit is inverted by the 8 2 20 
bit XOR gate 61a.6lb.61c receiving it on the re- 
spective path 63a,63b,63c. This corrects that bit in 
that its changed value causes its associated bits in 
the remaining two of the three buffers 52a,52b,52c 
and the row parity buffer 52d to agree parity-wise. 25 

An example is helpful here. Assume that during 
readback of a data sub-block from the DSUs 
19a,19b,19c. 19d an enror is detected in data sub- 
block 2 by the test element 57b. This causes the 
flip-flop 59b to be set, with a logical 1 present on 30 
its output path 70b. At some time while the individ- 
ual 8 bit bytes are issuing on the paths 
63a,63b.63c,63d further assume that the transverse 
parity generator 56 provides an output on the path 
81 in which a single bit is set to a logical 1 . Let us 35 
assume that the data bit corresponding to this 
logical 1 on the path 81 and earned on the path 
63b is also a logical 1. If a logical 0 is present on 
the path BOd indicating that according to conditions 
controlling its value the row parity sub-block in the 40 
row parity buffer 52d is connect, then the parity 
byte on the path 81, Including at least one logical 1 
bit generated by the parity generator 56 and iden- 
tifying the location of the bit in enror on the path 
63b is gated to the path 69. This 8 bit byte is 45 
further gated by the logical 1 generated on the 
path 80b by the OR gate 77b to the path 71b. The 
bit on the path 63b having the same bit position as 
the logical 1 on the path 71b from the 8 ^ 2 bit 
AND gate 60b is inverted by the 8 ^ 2 bit XOR 50 
gate 61 and issues as a logical 0 on the path 62b 
because both inputs at that bit position have the 
same value, in this case 1. The logical 0 on the 
path 62b at the position of interest here is the 
inverse of the togical 1 on the path 63b which was 55 
read from the DSU 19b. In all likelihood, this bit 
(and periiaps others as well in this data sub-block 
stored in the buffer 52b) is incorrect, and by invert- 



ing this bit from the buffer 52b, the correct value 
for the bit is encoded in the signal on the path 62b. 
Note that inverting a single bit in any group of four 
for which parity is calculated by the transverse 
parity generator 56 changes the parity for that 
group, in effect correcting it. 

The unlikely event of two or more data and row 
parity sub-blocks of a data block toeing in eaor is 
dealt with by supplying the outputs from the OR 
gates 77a.77b.77c.77d to a "2+ bad sub-blocks* 
element 72. If two or store logical Is are presented 
on the path 80a.80b.80c.80d to the element 72, this 
indicates that two or more of the data sub-blocks of 
a data block hsjve errors in them. In response to 
this condition, the element 72 provides a signal on 
a path 73 which indicates to the CPU or other 
external device that uncorrectable errors are 
present in the block. 

Note that for byte parity errors detected by the 
byte parity test elements 76a,76b.76c,76d, it is 
possible that for successive bytes, different data 
sub-blocks, may contain the en'or(s) and yet be 
correctable. This is because tiie byte parity gen- 
erated by the byte parity generators 
18a.18b,18c.18d shown in Rgure 1 is localised to 
tiie single byte involved, and hence need not affect 
tiie correction of similar errors occurring in non- 
associated bytes in other sub-blocks. Note also 
that if a DSU or ECC fault is detected for a particu- 
lar data sub-block as indicated by the appropriate 
flip-flop 59a,59b.59c,59d. a byte parity error in a 
different data sub-block can no longer be cor- 
rected. This condition Is flagged by the element 72. 

It is well-known that the function of logic cir- 
cuitry such as that described above can be du- 
plicated fcfy many different logic structures. For 
example, selection of logical 0 and 1 values is 
somewhat arbitrary in that these terms really repre- 
sent only voltage levels and individual circuit re- 
sponses to ttiese voltages. These conventions and 
others as well are well-known to those having famil- 
iarity with logic design, and no particular note need 
be taken of such. 

As was mentioned previously, it is also impor- 
tant to realise that use of only three DSUs 
19a,19b,19c to store data is probably not the num- 
ber that a typical commercial data storage system 
according to the present invention would have, 
since the reliability of these DSUs justifies in most 
cases that eight or more be united in a single data 
storage system. The configuration of the buffers 
59a,59b,59c.59d in storing 8 bit parallel bytes is 
arbitrary as well. In such a complex electronic data 
storage system as is described above, it is to be 
expected that many altematives are possible to 
provide a data storage system having similar capar 
bilities. 
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Claims 

1. A data storage system for storing a data - 
block supplied to the system encoded in a set of at 
least three individual data sub-block signals, each 
of said signals encoding one of the same number 
of sub-blocks into which the data block is broken, 
the system being characterised by comprising: a 
plurality of similar data storage units {19a,19b.19c) 
in number equal to the number of data sub-block 
signals and another, redundant, data storage unit 
(19d), each capable of storing a plurality of sub- 
blocks within itself responsive to a write select 
signal and encoding them in an ou^ut data sub- 
block signal responsive to a read select signal 
specifying the sub-block desired, each of the data 
sub-block signals being received by a preselected 
one of the data storage units, and each data stor- 
age unit being substantially physically independent 
from the others and liable to independent failure to 
supply output data sub-block signals correctly en- 
coding the sub-blocks stored therein; data redun- 
dancy means (15) receiving the set of data sub- 
block signals for generating according to a 
preselected algorithm a. redundant data sub-block, 
said redundant data sub-block being of the type for 
which a data reconstruction algorithm e>dst$ permit- 
ting reconstruction of any one data sub-block using 
the remaining data sub-blocks and the redundant 
data sub-block, and for providing a signal encoding 
the redundant data sub-block to the redundant data 
storage unit (19d); a plurality of data storage unit 
error detection means (13a,13b.l3c) each oper- 
atively associated with a preselected data storage 
unit, for providing a sub-block error signal respon- 
sive to failure of the associated data storage unit to 
correctly encode in an output data sub-block signal 
a sub-block stored within it: control means (25) for 
supplying the write and read select signals to the 
data and redundant data storage units 
(19a.19b,19c,19d) tn a preselected sequence; and 
data reconstruction means (30) for receiving the 
sub-block error signals from the error detection 
means (13a.l3b. 13c) and the data and redundant 
data sub-block signals from the data storage units, 
for employing the data reconstruction algorithm to 
recreate and encode in the output data signal, the 
data sub-block originally stored within the data 
storage unit for which the sub-block enror signal 
was generated. 

2. A system as claimed in clam 1 charac- 
terised by byte error code generating means 
{18a,18b.18c,18d) for receiving a data sub-block 
signal from a data storage unit, for providing to the 
en-or detection means a signal encoding a byte 
error detection code associated with at least one 
byte within the sub-block, said byte error detection 
code generated according to a preselected byte 



error detection algorithm which includes as a part 
thereof steps by which certain data errors in each 
said byte may be detected; and byte error detec- 
tion means for receiving each byte error detection 
5 code signal and a signal encoding ttie byte for 
which it was generated, for applying tiie error de- 
tection algorithm to each said byte, and its asso- 
ciated byte detection code and responsive to de- 
tection of an enror in said byte, issuing a byte enror 
70 signal associated with tiie byte having tiie error and 
its sub-block, the data redundancy means (15) in- 
cluding means for generating according to the 
preselected algorithm a redundant data sub-block 
whose data reconstruction algorithm permits re- 
rs constnjction of a byte witiiin a data sub-block using 
an associated byte in the redundant sub-block and 
an associated byte from each of the other data 
sub-blocks, the data reconstruction means includ- 
ing means for receiving the byte error signal, for 
20 employing the data reconstruction algorithm to re- 
create and encode in tiie output data signal the 
data sub-btock byte originally stored wittiin the data _ 
storage unit 

3. A system as claimed in claim 2 charac- 
25 terised in that tiie byte error detection means is 
arranged to receive signals encoding bytes from at 
least two different sub-blocks of tiie same data 
block and to supply byte error detection code 
signals for each, the data reconstruction means 
30 including means for receiving tiie byte error detec- 
tion code signals, for supplying an uncorrectable 
error signal responsive to detecting errors in at 
least two bytes occupying the same relative posi- 
tion in two different sub-blocks. 
35 4. A system as claimed in claim 2 or 3 charac- 
terised in that the byte en-or code generating 
means (18a,18b, 18c,18d) includes means for gen- 
erating a parity bit signal for tiie byte, 

5. A system as claimed in any preceding claim 
40 characterised in that the data reconstnjction means 
further includes means (72) for receiving the sub- 
block error signals, and responding to errors in at 
least two sub-blocks of the same data block, sup- 
plies an uncorrectable error signal. 
45 6. A system as claimed in any preceding claim 
characterised in that the data redundancy means 
includes means for generating for a set of asso- 
ciated bits, one from each data sub-block, a signal 
encoding tiie parity of said set of bits. 
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